Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/tPdKpa6Wyse8O4H10-T6PRLVUOs.roa
File: tPdKpa6Wyse8O4H10-T6PRLVUOs.roa (raw, json)
Hash identifier: IXWBfj1l99rE18qe/SvZgYL3/XGn0AmXj4HmRMYi+qc=
Subject key identifier: B4:F7:4A:A5:AE:96:CA:C7:BC:3B:81:F5:D3:E4:FA:3D:12:D5:50:EB
Certificate issuer: /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial: 01856E2665CFA2059152D912BE97F83FDDDC
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/tPdKpa6Wyse8O4H10-T6PRLVUOs.roa
Signing time: Sun 01 Jan 2023 16:24:48 +0000
ROA not before: Sun 01 Jan 2023 16:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1955
IP address blocks: 195.111.0.0/16 maxlen: 16
195.199.0.0/16 maxlen: 16
193.224.0.0/15 maxlen: 15
193.6.0.0/16 maxlen: 16
2001:738::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:65:cf:a2:05:91:52:d9:12:be:97:f8:3f:dd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
Validity
Not Before: Jan 1 16:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4f74aa5ae96cac7bc3b81f5d3e4fa3d12d550eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:90:0c:24:21:78:21:9f:9a:e5:54:d0:a8:
02:81:06:cd:db:ee:02:af:59:6f:d5:b2:d8:43:e2:
76:fe:50:de:08:41:fb:35:eb:94:2b:69:e2:19:cd:
fc:c3:73:c5:e8:a7:5a:e4:e5:b2:e3:4b:8e:80:75:
7f:07:a5:af:bb:29:a9:61:02:84:88:d0:4e:f0:75:
63:06:cf:7a:81:b4:e3:4e:1b:db:4c:21:2a:cb:68:
8e:9d:57:50:96:a7:b1:03:f2:3d:7f:45:be:2d:cb:
d6:13:94:7b:ba:fe:77:0a:1f:90:00:d4:d3:12:7a:
36:a8:be:39:b8:8a:64:e6:e2:a4:b7:2d:8a:a2:00:
0d:9a:cb:9d:7b:96:8a:87:08:98:41:af:1f:f8:f9:
81:12:a0:ed:23:19:7d:43:ff:7a:26:d8:29:04:31:
52:aa:49:30:b4:cd:fb:a2:61:c0:15:96:12:c1:65:
c2:aa:5b:04:39:0d:94:52:30:84:92:51:1c:7c:b3:
9d:9b:80:0a:e9:5f:3a:93:c5:99:95:38:84:52:cd:
76:f6:29:47:84:6f:48:ff:57:b3:bb:e9:4c:be:35:
34:86:a1:80:89:a2:2a:57:56:70:fd:2c:c9:96:b3:
e5:aa:5c:48:76:93:ec:23:4f:da:b4:07:75:c2:3f:
6a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F7:4A:A5:AE:96:CA:C7:BC:3B:81:F5:D3:E4:FA:3D:12:D5:50:EB
X509v3 Authority Key Identifier:
keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/tPdKpa6Wyse8O4H10-T6PRLVUOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.6.0.0/16
193.224.0.0/15
195.111.0.0/16
195.199.0.0/16
IPv6:
2001:738::/32
Signature Algorithm: sha256WithRSAEncryption
51:03:f4:fe:52:24:c6:17:8e:6d:80:ac:54:02:29:51:83:91:
1f:6f:81:94:2c:4d:c5:64:56:5c:71:1c:58:dd:57:4b:4c:5e:
91:d9:8b:01:65:67:20:33:58:a8:97:9f:cd:1e:92:43:76:36:
fd:f6:f9:d2:a7:33:14:6b:e4:97:eb:dc:8d:3b:45:ef:4f:f0:
42:e2:79:b6:a0:00:0d:cd:4b:d8:c1:89:ab:dd:a2:27:a3:8a:
04:c7:2e:d1:7a:17:88:9f:74:86:aa:9a:d1:b4:0c:21:6b:37:
5a:dd:2f:eb:ac:f3:71:5a:b6:c5:2a:4e:ec:7b:46:93:20:a6:
e3:b5:66:97:19:80:5d:43:61:af:ba:d5:dc:a7:29:7e:0e:92:
75:8c:8f:ab:22:0e:54:6c:81:d7:00:81:87:09:44:77:ea:2c:
ac:0e:41:de:9c:ea:1d:f3:de:6b:69:17:17:ca:7e:55:10:ee:
fe:8d:99:52:bb:95:28:3c:a9:fd:78:33:db:5e:af:ab:d3:5c:
93:2a:da:ee:b5:f3:df:e1:3e:10:db:3f:81:81:dd:7d:51:0f:
15:f0:73:a6:fe:26:2d:14:0a:8c:89:f9:6b:c9:07:58:48:07:
29:04:dd:0c:a9:8a:0a:3f:36:09:7c:1a:e6:df:5f:df:6f:ae:
25:b9:8b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:14 2024 by rpki-client on console-ams.rpki-client.org